Method, device and electronic equipment for inputting dynamic link library documents

A dynamic link library and file technology, which is applied in program control devices, program control design, electrical digital data processing, etc., can solve problems such as inability to load dynamic link library files and easy interception.

Inactive Publication Date: 2016-09-21
ZHUHAI BAOQU TECH CO LTD
View PDF3 Cites 20 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiments of the present invention provide a method, device, and electronic device for injecting dynamic link library files, which can ensure the loading of dynamic link library files of applications and imp

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, device and electronic equipment for inputting dynamic link library documents
  • Method, device and electronic equipment for inputting dynamic link library documents
  • Method, device and electronic equipment for inputting dynamic link library documents

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0068] figure 1 It is a schematic flowchart of a method for injecting a dynamic link library file into Embodiment 1 of the present invention, as shown in figure 1 As shown, the method of this embodiment may include:

[0069] Step 101, allocate a process according to the received dynamic link library file loading request, and call a loading module callback function that records the process;

[0070] In this embodiment, aiming at the technical problem that the existing DLL file injection is realized by calling the windows LoadLibrary function or the windowsCreateRemoteThread function to realize the DLL file loading, which is easily intercepted by some application programs, a new DLL file injection implemented at the windows kernel layer is provided and The loading method is used to solve the problem that the application program hooks the windows LoadLibrary function and the windowsCreateRemoteThread function.

[0071] In this embodiment, the operating system receives a dynamic...

Embodiment 2

[0095] Figure 4 It is a schematic flow chart of the method for injecting a dynamic link library file into the second embodiment of the present invention, such as Figure 4 As shown, the method of this embodiment may include:

[0096] Step 401, calling the image modification setting kernel function to register the loading module callback function.

[0097] In this embodiment, as an optional embodiment, the image modification setting kernel function is the PsSetLoadImageNotifyRoutine kernel function.

[0098] In this embodiment, the loading module callback function is called before the process loads the DLL file, and the loading module callback function is used to modify the general import table of the process. When the process starts, the information node of the newly added DLL file is written into the general import table, thereby Realize the injection and loading of specific DLL files.

[0099] Step 402, allocate a process according to the received dynamic link library fi...

Embodiment 3

[0107] Figure 5 It is a schematic flow chart of the method for injecting dynamic link library files into Embodiment 3 of the present invention, as shown in Figure 5 As shown, the method of this embodiment may include:

[0108] Step 501, allocate a process according to the received dynamic link library file loading request, and call a loading module callback function that records the process;

[0109] Step 502, analyzing the callback function of the loading module, and obtaining the general import table address according to the parameters of the callback function of the loading module;

[0110] Step 503, read the general import table corresponding to the address of the general import table, and extract the dynamic link library files not stored in the general import table from the dynamic link library files contained in the dynamic link library file loading request;

[0111] In this embodiment, the processes from step 501 to step 503 are respectively similar to steps 101 to ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention discloses a method, device and electronic equipment for inputting dynamic link library documents and relates to a document input technology. The method, the device and the electronic equipment can increase a success rate for inputting the dynamic link library documents. The method comprises the steps that processes are distributed according to a received loading request for the dynamic link library documents, and a loading module callback function is called; the loading module callback function is analyzed, and a universal leading-in list address is acquired according to parameters of the loading module callback function; a universal leading-in list corresponding to the universal leading-in list address is read, and the dynamic link library documents which are not stored in the universal leading-in list are extracted from the dynamic link library documents contained in the loading request for the dynamic link library documents; the extracted dynamic link library documents are written into the universal leading-in list, and an updated universal list is generated and then written into internal memory space of the processes; and the dynamic link library documents in the updated universal list are loaded in the internal memory space. The method, the device and the electronic equipment disclosed by the invention are applicable to inputting of safety-type dynamic link library documents which can be intercepted easily.

Description

technical field [0001] The invention relates to file injection technology, in particular to a method, device and electronic equipment for injecting dynamic link library files. Background technique [0002] With the continuous development of computer communication and Internet technology, the application of electronic equipment is becoming more and more common. For example, smart mobile phones, personal digital assistants, handheld computers, and notebook computers have been more and more widely used. There are more and more programs (APP, Application). In the Windows operating system, because a large number of applications are not a complete executable (PE, Portable Executable) file, they can be divided into one or more relatively independent dynamic link libraries. (DLL, Dynamic Link Library) file, wherein, the DLL file can also be called a DLL module, placed in the Windows operating system in the form of an import table, and the address of the exported function of the DLL ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F9/445
CPCG06F9/44521
Inventor 李文靖
Owner ZHUHAI BAOQU TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products